“We should start with input validation before we even let them, before we even let them take a single line off the command line.”

Transcript evidence from Hasan Yasar -- Actionable SBOM via DevSecOps.